Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/00890627-36dd-3a00-8bdf-7bdb97b8e0fc.roa
File:                     00890627-36dd-3a00-8bdf-7bdb97b8e0fc.roa (raw, json)
Hash identifier:          dzlndFsKM/n/a3kUruAs6KG6yDbsLC50JAANzNIVYRo=
Subject key identifier:   D3:01:5E:8B:F4:BA:9D:79:33:8C:4B:F2:30:CD:C7:BC:48:BB:30:AC
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584ACF710BD52E55DD9268584050
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/00890627-36dd-3a00-8bdf-7bdb97b8e0fc.roa
Signing time:             Sun 10 Aug 2025 13:00:41 +0000
ROA not before:           Sun 10 Aug 2025 13:00:41 +0000
ROA not after:            Sat 08 Nov 2025 14:00:41 +0000
asID:                     13335
IP address blocks:        172.70.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cf:71:0b:d5:2e:55:dd:92:68:58:40:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 10 13:00:41 2025 GMT
            Not After : Nov  8 14:00:41 2025 GMT
        Subject: CN=d0798d0d-883e-40cf-ba6a-7ae76964d406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:08:70:52:be:18:17:06:a0:65:63:24:63:23:
                    3a:71:e0:94:81:6d:1e:79:8f:9c:25:8b:62:66:ff:
                    43:29:39:2b:f9:d9:37:c2:d6:df:6c:b0:69:93:1a:
                    20:30:00:8a:6e:01:38:d0:de:39:dc:11:f3:f7:b9:
                    b7:29:53:f4:70:eb:5a:70:ff:a4:1b:53:fe:d5:49:
                    72:89:f3:20:c3:ba:e3:2f:18:3c:e6:12:71:22:d4:
                    34:9c:35:fe:3c:ec:b1:7c:58:6c:a2:dc:f3:7b:f9:
                    e4:41:b8:43:e2:3f:9d:e5:3e:8e:99:aa:5b:ef:35:
                    cc:e3:30:90:9e:f3:6c:6f:3a:d8:3f:e0:2c:9b:0d:
                    7f:de:fa:92:eb:78:b4:b3:15:07:09:9a:ad:b9:db:
                    60:d0:f6:b4:85:8a:fe:c2:0b:f4:8d:5b:d4:1d:1b:
                    32:25:bd:8b:52:04:36:99:c2:ce:72:d4:44:f8:b8:
                    d0:d9:0e:b4:30:54:55:7b:3e:07:3c:9e:a6:07:ee:
                    da:14:50:fb:85:76:dd:45:91:e0:ae:59:c3:04:bc:
                    3d:db:34:64:f0:a3:dc:a2:0d:73:e6:dd:da:03:d7:
                    6c:92:96:08:d5:83:6a:b1:7f:61:62:74:90:d3:6e:
                    50:4a:b3:a1:c2:e1:3c:69:90:73:9b:3e:3d:85:6f:
                    d0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:01:5E:8B:F4:BA:9D:79:33:8C:4B:F2:30:CD:C7:BC:48:BB:30:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/00890627-36dd-3a00-8bdf-7bdb97b8e0fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:da:4a:0e:9a:9b:41:ef:3d:3b:87:44:6c:2e:62:b2:15:b0:
         44:90:36:f7:e8:bb:0b:79:c8:86:03:ca:d4:62:a1:ae:9d:d9:
         0d:57:3c:b2:b5:72:53:78:7b:4b:11:7f:60:fb:fd:ce:5b:17:
         64:3c:bf:39:6d:b3:0e:c6:fa:8d:7d:f5:7c:ae:18:cb:8d:4c:
         b3:cb:40:79:1d:58:0d:d7:db:6c:c2:b0:92:a0:9d:cb:f5:b8:
         74:02:c3:ea:ba:77:24:70:19:4e:8a:1e:e3:ba:32:74:57:2d:
         da:63:67:af:ec:0f:fc:ea:3b:08:54:47:f2:e5:44:74:26:ef:
         5d:de:9e:f5:61:50:2b:f6:b0:0f:64:85:81:60:1c:4a:aa:89:
         9f:ff:e0:c5:61:08:9c:ec:5e:af:48:5d:54:e4:4c:2c:5b:6b:
         cf:8f:3c:9d:2a:d9:3c:82:f0:8b:f0:8b:a6:7d:df:72:75:b8:
         99:c0:1b:d1:b7:67:5a:68:e9:00:86:8c:e9:67:fe:8e:d0:be:
         c8:0a:9c:98:42:f4:61:14:1c:e8:b2:db:8e:1e:d2:1a:1c:a7:
         22:46:70:73:95:4e:d4:2b:b9:5d:3e:cc:5a:1e:39:aa:a0:72:
         7e:09:f9:ad:f6:d4:12:90:1a:0e:02:2e:69:73:3e:3b:06:69:
         b8:ad:c2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:20:01 2025 by rpki-client